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Top Stories 

• About 21,000 customers lost power, several roads were closed, flights cancelled, and 
schools and State offices closed August 8 as Tropical Storm Iselle hit Hawaii. - Los 
Angeles Times (See item 2) 

• Police in Brea, California, arrested an Anaheim man believed to be the “Quad Bandit” 
August 7, a suspect linked to 10 bank robberies in Los Angeles and Orange counties. - 
KCBS 2 Los Angeles (See item 9) 

• A 100,000-gallon water tower in Shelby County, Kentucky, collapsed, wiping out a shed 
and causing significant damage a post office and a church. - WAVE 3 Louisville (See item 

12 ) 

• Police in Cobb County, Georgia, arrested a woman who allegedly stole a police car, led 
police on a chase that closed Interstate 75, and then crashed and injured several people 
August 10. - Atlanta Journal-Constitution (See item 24) 
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Energy Sector 



1. August 10, KOKH 25 Oklahoma City - (Oklahoma) Power restored in MWC and 
Harrah following car crash. Over 23,000 Oklahoma Gas & Electric customers in the 
Oklahoma City metro area were without power for 2 hours August 10 after a car 
crashed into transmissions lines in Midwest City. 

Source: http://www.okcfox.com/storv/26244572/oge-20000-without-power-in- 
midwest-cityharrah-area 

2. August 8, Los Angeles Times - (Hawaii) Iselle hits Hawaii: Heavy rain damages 
homes; roads blocked. About 21,000 customers lost power August 8 due to Tropical 
Storm Iselle, which caused heavy rains and strong winds prompting the closure of 
several roads and highways on the Big Island and Maui, as well as the cancellation of 
flights into and out of the island. Public schools, universities, beach parks, and national 
parks were closed while all Hawaii State government offices were closed through 
August 11. 

Source: http://www.latimes.com/nation/nationnow/la-na-nn-hawaii-storm-iselle-juliio- 
20140808-story.html 

[ Return to top ] 

Chemical Industry Sector 

3. August 11, WJHL 11 Johnson City - (Tennessee) Explosion at Eastman Chem. 
research facility; no workers seriously injured. Authorities are investigating an 
August 10 explosion that blew out windows and doors inside a research facility located 
at an Eastman Chemical Company facility in Kingsport. One worker was transported to 
an area hospital and two additional individuals received treatment at an on-site medical 
facility. 

Source: http://www.wihl.com/storv/26245481/workers-recovering-after-explosion-at- 
eastman-sunday-night 

4. August 9, WCBD 2 Charleston - (South Carolina) Authorities on the scene of a plant 
fire. The #1 Unit Compressor Building at a BP Chemical Company plant in Huger was 
taken offline and the compressor was isolated August 9 due to a fire inside the 
structure. The cause of the fire is under investigation. 

Source: http://www.counton2.com/story/26239948/authorities-on-the-scene-of-a-plant- 
fire 

[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

5. August 8, Baltimore Sun - (Maryland) Calvert Cliffs nuclear plant cited for safety 
issue. The U.S. Nuclear Regulatory Commission cited the operators of the Calvert 
Cliffs nuclear power plant in Lusby August 8 for a low-to-moderate safety issue due to 
improperly set radiation monitors that would trigger an alarm at radiation levels 100 
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times lower than would present a threat, creating the potential for plant staff to 
overreact and take unwarranted emergency measures. 

Source: http://www.baltimoresun.com/features/green/blog/bs-bz-calvert-cliffs-nuclear- 
citation-20140808,0,325214.story 



T Return to top i 

Critical Manufacturing Sector 

6. August 11, Occupational Health & Safety - (National) Hyundai paying $17.35 million 
civil penalty in brake corrosion case. The National Highway Traffic Safety 
Administration (NHTSA) announced August 7 that Hyundai agreed to pay a $17.35 
million civil penalty and comply with NHTSA oversight requirements for failing to 
report in a timely manner a safety-related defect affecting model year 2009-2012 
Genesis vehicles. The NHTSA determined that Hyundai in 2012 was aware of a brake 
fluid corrosion issue but instead of recalling the vehicles, the company instructed 
dealerships to change the unsuitable brake fluid 

Source: http://ohsonline.com/articles/2014/08/ll/hyundai-paying-civil- 
penalty.aspx?admgarea=news 

7. August 10, USA Today - (National) VW recalls about 150,000 SUVs for stalling. 
Volkswagen announced a recall August 9 for 151,389 model year 2009-2014 Tiguan 
vehicles due to the potential for fuel bubbles to develop when winter fuel blends are 
used in warmer conditions or when the vehicle is restarted shortly after it was in 
operation, creating the potential for the vehicle to stall. The issue will be addressed by 
updating the vehicles’ software to prevent the issue. 

Source: http://www.usatodav.com/storv/monev/cars/2014/08/10/volkswagen-vw- 
tiguan-recall/1 3859381/ 

8. August 8, WXYZ 7 Detroit - (National) GM announces 5 recalls covering almost 
270,000 vehicles Friday afternoon. General Motors announced five recalls August 8 
covering around 270,000 vehicles from model years between 2002 and 2015. The 
largest recall involved over 200,000 model year 2002-2004 Saturn Vue vehicles due to 
the potential for the vehicle’s key to be removed from the ignition while not in the ‘off’ 
position. 

Source: http://www.wxvz.com/monev/auto-news/gm-announces-5-recalls-covering- 
almost-270000-vehicles-friday-aftemoon 



For another story, see item 28 



T Return to top i 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



9. August 8, KCBS 2 Los Angeles - (California) Man in custody as ‘Quad Bandit’ after 
10th bank robbery. Police in Brea arrested an Anaheim man believed to be the “Quad 
Bandit” August 7, a suspect linked to 10 bank robberies in Los Angeles and Orange 
counties. The suspect was arrested following the robbery of a Bank of the West branch 
in Brea. 

Source: http://losangeles.cbslocal.com/2014/08/08/quad-bandit-suspect-in-custodv- 
following-tenth-bank-robbery-in-brea/ 

10. August 8, U.S. Securities and Exchange Commission - (International) SEC charges 
Bahamas-based brokerage firm and president with facilitating fraudulent scheme 
by hedge fund manager. The U.S. Securities and Exchange Commission announced 
charges August 8 against Bahamas-based Alliance Investment Management Limited 
(AIM) and its president for allegedly working with a man charged with defrauding 
investors in order to misrepresent the assets and performance of the man’s investment 
scheme. AIM and its president allegedly allowed the man to misappropriate at least $45 
million in investor funds and received over $5 million in return for their assistance. 
Source: 

http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370542613 185#.U- 
iMsPldVKA 

11. August 8, U.S. Securities and Exchange Commission - (National) SEC obtains final 
judgments against all defendants and relief defendants, securing permanent 
injunctions and nearly $70 million in disgorgement, prejudgment interest, and 
civil penalties. The U.S. Securities and Exchange Commission obtained final 
judgments August 1 against AIC Inc., Community Bankers Securities LLC, and their 
founder and CEO, as well as against several relief defendants, ordering them to pay 
almost $70 million in disgorgement and other penalties for running an offering fraud 
scheme that operated between 2006 and 2009 and defrauded investors in several States. 
Source: http ://w w w . sec . gov/litigation/litreleases/20 1 4/lr23062 .htm 

For another story, see item 35 
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Transportation Systems Sector 

12. August 11, WABC 7 New York City; Associated Press - (Puerto Rico) JetBlue says 
evacuated flight from Puerto Rico experienced bird strike. A JetBlue flight headed 
to New York City from San Juan, Puerto Rico, aborted takeoff after its left engine 
caught fire due to a bird strike August 9. The 186 passengers aboard were evacuated 
and 3 people suffered minor injuries from the emergency evacuation. 

Source: http://7online.com/news/ietblue-says-flight-evacuated-in-puerto-rico- 
experienced-bird-strike-/250627/ 

13. August 11, Salem News; Associated Press - (Massachusetts) Fire on Emirates plane 
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put out at Boston. An engine on an Emirates flight from Dubai caught fire prior to 
landing at Logan International Airport in Boston August 10, prompting crews to put out 
the fire when the plane landed. There were no reported injuries among the 367 
passengers and crew members on the flight. 

Source: http ://w w w . salemnews .com/nationworld/x 192791 8 802/Fire-on-Emirates- 
plane-put-out-at-Boston 

14. August 10, WCSC 5 Charleston - (South Carolina) NCPD: 6 train cars derail on 
Rivers Ave. Six train cars from a CSX train derailed in North Charleston August 9, 
prompting roadway and rail closures. Crews were expected to arrive at the scene to 
assist in getting the cars back onto the tracks after several of them rolled onto their side. 
Source: http://www.live5news.com/story/26238581/consolidated-dispatch-confirms- 
train-derailment-in-north-charleston 



15. August 9, Atlanta Journal-Constitution - (Georgia) MARTA’s Ashby station 
reopened after stabbing investigation. The Metropolitan Atlanta Rapid Transit 
Authority’s Ashby station in Atlanta reopened both eastbound and westbound traffic 
August 9 after closing for nearly 5 hours while authorities investigated a stabbing 
following a fight inside the station. One person was injured and transported to an area 
hospital and authorities took a second individual into custody. 

Source: http://www.ajc.com/news/news/fight-temporarily-closes-martas-ashby-station- 
bus-/ngyXz/ 

16. August 8, WLS 7 Chicago - (Michigan) CTA Blue Line resumes normal service after 
‘minor derailment’ at Forest Park. Service on Chicago Transit Authority’s Blue Line 
resumed after several hours following an August 8 derailment caused by a westbound 
Blue Line train that derailed as it was pulling into the Forest Park station, causing two 
cars to slip off the tracks. 

Source: http://abc7chicago.com/news/cta-blue-line-train-derails-at-forest-park-/248966/ 
For additional stories, see items 2, 19, and 24 
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Food and Agriculture Sector 

17. Augustll, Lancaster Newspapers - (Pennsylvania) Teen dies after falling into 
manure pit in Leacock Township. A teenager drowned August 9 in a manure pit on a 
Leacock County farm after the skid loader that he was operating overturned into the 4- 
foot deep pit and he was unable to escape due to a safety belt that would not release. 
Source: http://lancasteronline.com/news/local/updated-teen-dies-after-falling-into- 
manure-pit-in-leacock/article dfe4b568- 1 fd6- 1 1 e4-a67b-00 1 a4bcf6878 .html 

18. August 9, WJBD 100.1 FM Salem - (Illinois) Farm truck turns on side dumping 200 
gallons of farm chemicals. The driver of a Loepker Farms-owned service truck lost 
control of the vehicle when he swerved to avoid colliding with an oncoming car and 
overcorrected, causing the truck to overturn and spill 200 gallons of concentrated farm 
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chemicals onto South College Street in Salem, Illinois. Authorities reported that the 
spill posed no human health risks, and the roadway was closed for 6 hours while crews 
cleaned the scene. 

Source: http://www.wibdradio.com/LocalNews/Farm-Truck-Tums-On-Side-Dumping- 
200-Gallons-of-Faim-Chemicals 



[ Return to top ] 

Water and Wastewater Systems Sector 

19. August 10, WAVE 3 Louisville - (Kentucky) Water tower collapse damages church, 
utility lines in Shelby County. A 100,000-gallon water tower in Shelby County 
collapsed, wiping out a shed and causing significant damage a post office and the 
Waddy Baptist Church. 

Source: http://www.wave3.com/storv/26240839/water-tower-collapse-damages-church- 
utility-lines-in-shelby-county 
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Healthcare and Public Health Sector 

20. August 11, Newark Star-Ledger - (New Jersey) Jersey City Medical Center patient 
data is lost on disk. The Jersey City Medical Center notified an unknown number of 
Medicaid patients that their personal information, including Social Security numbers, 
was on an unencrypted computer disk that was lost in June. The hospital is 
investigating and reported that the disk was sent in a package through the United Parcel 
Service from the hospital to an outside company and failed to arrive at its destination. 
Source: 

http://www.ni.com/healthfit/index.ssf/2014/08/iersey city medical center loses patie 
nt data.html 
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Government Facilities Sector 

21 . August 8, Norwalk Hour - (Connecticut) NCC closed Friday due to power outage. A 
power outage prompted the closure of Norwalk Community College in Connecticut 
August 8. 

Source: http://www.thehour.com/news/norwalk/ncc-closed-friday-due-to-power- 
outage/article df9e0c62-lf22-l Ie4-98a2-0017a43b2370.html 

For another story, see item 2 



[ Return to top ] 
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Emergency Services Sector 



22. August 10, Des Moines Register - (Iowa) Webster County outage causes 911 calls to 
be re-routed. Emergency 9-1-1 calls to Webster County were re-routed to Calhoun 
County for nearly 6 hours August 9 due to a phone outage in the area that knocked out 
service for approximately 14,000 people. 

Source: http://www.desmoinesregister.com/storv/news/crirne-and- 
courts/20 1 4/08/ 1 0/webster-county-outage-9 1 1 -calls/ 1 3856441/ 

23. August 10, Medina County Gazette - (Ohio; Indiana) 911 outage affects mobile 
phones. Emergency 9-1-1 service was down for over 2 hours August 8 for cell phone 
users in Medina County due to an issue with Frontier Mobile. The sheriffs captain 
reported that that the provider was working on equipment in Indiana which led to the 
outage. 

Source: http://medinagazette.northcoastnow.com/2014/Q8/10/911-outage-affects- 
mobile-phones/ 

24. August 10, Atlanta Journal-Constitution - (Georgia) Police: Cobb patrol car stolen, 
officer hurt during chase on 1-75. Police in Cobb County arrested a woman who 
allegedly stole a police car during a traffic stop and led officers on a high-speed chase 
on Interstate 75 August 10. The suspect crashed the patrol car, injuring a number of 
people which prompted the closure of Interstate 75/85 southbound for several hours. 
Source: http://www.aic.com/news/news/breaking-news/cobb-police-woman-steals- 
patrol-car-wrecks-near-do/ngywn/ 

25. August 9, KFVS 12 Cape Girardeau - (Missouri) Non-emergency lines at Scott Co. 
Sheriff’s Office back open after lightning strike. Administrative phone lines at the 
Scott County Sheriffs Office in Missouri were down overnight August 8-9 due to a 
lightning strike that damaged phone equipment at the Scott County Court House. 
Ameren UE repaired the damaged transformer, restoring phone service. 

Source: http://www.kfvsl2.com/storv/26238174/non-emergency-lines-at-scott-co- 
sheriffs-office-back-open-after-lightning-strike 

26. August 8, Corning Leader - (New York) Woman stole $22K from Almond fire 
department. A former Almond Volunteer Fire Department treasurer was charged 
August 8 with stealing $22,000 from the New York department by allegedly taking 
fundraising proceeds and writing several checks to herself. She also made 
unsubstantiated withdrawals from department accounts. 

Source: http ://w w w .the-leader.com/article/20 1 40808/News/ 1 408097 1 3 
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Information Technology Sector 



27. August 11, Help Net Security - (International) Critical 0-days found in CPE WAN 
Management Protocol. Check Point researchers reported finding several zero-day 
vulnerabilities in CPE WAN Management Protocol (CWMP/TR-069) deployments 
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used by major Internet service providers (ISPs) to control home and business Internet 
equipment which could allow large-scale malware infections able to compromise 
privacy, steal information, or cause service disruptions. Check Point reported the 
vulnerabilities to ISPs and assisted in closing them before reporting their findings 
publicly. 

Source: http://www.net-security.org/secworld.php7idM7237 

28. August 11, Help Net Security - (International) Smart Nest thermostat easily turned 
into spying device. An independent researcher and two researchers from the University 
of Central Florida presenting at the 2014 Black Hat conference demonstrated how Nest 
smart thermostats can be compromised quickly using a USB flash drive, potentially 
allowing attackers to obtain information on a victim’s habits as well as network 
information such as WiFi credentials. Compromised thermostats could also be used to 
connect to the Internet and be used in a variety of malicious tasks. 

Source: http://www.net-securitv.org/secworld.php7idM7239 

29. August 9, Softpedia - (International) 10,000 impacted by resurging Facebook color 
changing app scam. Researchers at Cheetah Mobile reported that a resurgence of a 
scam that purports to change the color scheme of Facebook has affected 10,000 users 
recently. The campaign steals users’ Access Tokens and then attempts to install a 
malicious fake antivirus program or video player. 

Source: http://news.softpedia.com/news/10-000-Impacted-by-Resurging-Facebook- 
Color-Changing-App-Scam-454306.shtml 

30. August 8, The Register - (International) Oracle Database 12c’s data redaction 
security smashed live on stage. A researcher with Datacomm TSS presenting at the 
Defcon 22 conference demonstrated how a remote attacker could inject SQL queries to 
access redacted information in Oracle Database 12c due to several coding flaws. 

Source: 

http://www.theregister.co.uk/2014/08/08/oracle database 12c redaction is tot 
ally borked by bad code/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



31. August 11, KCAL 2 Los Angeles - (California) 1 hurt in Hollywood blast linked to 
‘improper use’ of insecticide fogger. Investigators believe the improper use of an 
insecticide fogger was the cause of an explosion and fire at a Hollywood apartment 
building August 11. One person was transported to an area hospital with bum injuries. 
Source: http://losangeles.cbslocal.com/2014/08/ll/l-hurt-in-hollywood-blast-linked-to- 
improper-use-of-insecticide-fogger/ 

32. August 10, Washington Post - (Maryland) Firefighters rescue 24 on roller coaster at 
Six Flags. Firefighters used a tower ladder to remove fencing and rescue 24 riders that 
were stranded 75 feet in the air for up to 5 hours after the Joker’s Jinx roller coaster 
malfunctioned at the Six Flags America amusement park in Marlboro August 10. The 
section of the park near the ride was closed indefinitely while authorities investigate the 
cause of the incident and inspect the ride. 

Source: http://www.washingtonpost.com/local/riders-stranded-after-six-flags-iokers- 
iinx-roller-coaster-malfunctions/2014/08/10/4a0cfa04-20c2-lle4-86ca- 
6f03cbdl5cla story.html 

33. August 10, WKRN 2 Nashville - (Tennessee) Tullahoma Walmart evacuated after 
suspicious device found. A Walmart store in Tullahoma was evacuated for over 2 
hours August 9 after maintenance workers reported finding a suspicious device in the 
building. Police cleared the scene after determining the device was not explosive. 
Source: http://www.wkrn.com/storv/26240361/walmart-evacuated-after-bomb-threat 

34. August 8, WUSA 9 Washington, D.C. - (Washington, D.C.) 70 displaced by DC 
apartment fire. Seventy residents were displaced by an August 7 fire that damaged 
several units at a Washington, D.C. apartment building. Three individuals were treated 
at the scene for minor injuries. 

Source: http://www.wusa9.com/story/news/local/dc/2014/08/07/16-apartments- 
evacuated-in-dc-fire/1375591 1/ 

35. August 8, Crain’s Chicago Business - (Illinois) Chicago Yacht Club hacked. The 
Chicago Yacht Club notified its members July 31 that a computer firm confirmed that 
malware was installed between April 26 and May 22 onto a server that hosts the club’s 
membership database, allowing hackers to access members’ personal information, 
including name, address, and payment card information. 

Source: http://www.chicagobusiness.com/article/20140808/BLOGS03/140809804 
For another story, see item 19 
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Dams Sector 

36. August 10, Twin Falls Time-News - (Idaho) North Side X Canal breaches during 
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storm. Torrential rain and low demand for irrigation water put excess strain on North 
Side Canal Co.’s X Canal when it breached August 6 and flooded parts of the desert 
between Jerome and Wendell. Crews reduced the flows in the main canal and worked 
to repair the embankment in order to resume normal operations by August 15. 

Source: httD://magicvalley.com/business/agriculture/north-side-x-canal-breaches- 

during-storm/article 0f0c7 2f 8-2046- 1 1 e4-a 1 1 7 -00 1 a4bcf8 87 a.html 
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To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
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